$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft File: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft (raw, json) Hash identifier: 2BI3ckr3d7m9BwZSNrBXJNNUifzGh+35rgK2QyoFPYE= Subject key identifier: 93:65:A8:7D:D0:97:D2:ED:C2:D2:25:B1:8B:C0:D2:F2:C6:3E:41:77 Authority key identifier: 2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 Certificate issuer: /CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Certificate serial: 085A6DF98DCCBDC880425C7473B77A19ED1B3CD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 08:12:35 +0000 Manifest this update: Thu 03 Sep 2026 08:07:35 +0000 Manifest next update: Fri 04 Sep 2026 09:06:35 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: ib7HPEQ/1sTUx6nXpMyLf2LdpmFve2tZtQrzXQVTi5I=) 2: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: hq7t6IGdrToWC5Y/u0/ln3majWig7C7xPRHwOMHho0s=) 3: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: HyudSDnKB8bCiy0S2RrKH+D8dZ2RY7de+E6PViymOWI=) 4: 2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl (hash: DMSlInBpYn4ODnacvcuQCbbnPUvykJnI/j835/fxz04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5a:6d:f9:8d:cc:bd:c8:80:42:5c:74:73:b7:7a:19:ed:1b:3c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DAFC25030509AD7126BBD93ABCCB95E7A186714 Validity Not Before: Sep 3 08:07:35 2026 GMT Not After : Sep 4 09:06:35 2026 GMT Subject: CN=9365A87DD097D2EDC2D225B18BC0D2F2C63E4177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:2a:70:9a:51:24:ce:97:33:c4:bc:62:16: c3:5a:fd:e5:54:65:40:9d:e2:e5:af:20:ac:80:3a: 69:e8:3e:56:65:3e:55:e0:96:67:71:37:30:22:cc: 28:c9:82:ea:d8:cd:e7:35:b9:82:0d:6c:86:0b:73: 00:bc:0d:76:33:57:1d:46:68:d4:ce:59:a2:1f:60: 99:ec:e8:66:20:8d:23:a7:c5:57:db:25:a3:7d:40: 49:6c:60:15:e4:c1:2d:5d:b7:84:63:68:66:03:88: 2e:36:43:39:f1:af:d1:09:77:a2:5d:38:8f:4d:38: a6:b0:92:14:e6:f6:03:ba:a8:9e:3e:1f:ea:20:c0: 56:fb:e7:73:93:1b:5b:e7:11:4c:a0:dc:19:8d:72: 49:56:99:a2:58:20:b5:66:bc:79:e0:ab:a6:bf:c1: 93:0e:45:5f:97:86:2d:0e:25:90:73:79:4d:db:07: 2a:8f:e8:9a:86:24:6e:8d:a7:3a:44:6d:08:27:c0: 46:7f:ed:ee:e9:d7:12:a2:db:30:e5:b3:f8:6e:0f: b7:67:37:bd:57:6e:68:f0:7d:0c:a3:9d:7b:80:dd: bc:25:f7:8d:96:38:45:e2:9f:6e:71:7a:de:12:c0: f8:b7:58:04:af:4f:5a:90:74:f9:62:f9:bf:b4:6f: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:65:A8:7D:D0:97:D2:ED:C2:D2:25:B1:8B:C0:D2:F2:C6:3E:41:77 X509v3 Authority Key Identifier: keyid:2D:AF:C2:50:30:50:9A:D7:12:6B:BD:93:AB:CC:B9:5E:7A:18:67:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2DAFC25030509AD7126BBD93ABCCB95E7A186714.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/2DAFC25030509AD7126BBD93ABCCB95E7A186714.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:dc:13:a2:8a:73:e7:98:7e:c9:c7:30:04:fd:19:4e:76:97: 36:f1:53:2f:1c:61:6a:2b:36:41:41:6c:3f:be:6c:25:ac:06: 91:b6:f3:3c:c6:86:22:59:a1:56:85:77:cd:63:44:86:6c:b1: 0f:08:97:01:d5:78:91:af:d9:c9:3d:b3:1b:eb:f3:79:b0:44: f5:1e:1d:1c:1d:f8:c9:81:60:de:52:e3:3d:77:7a:01:ab:85: 97:e5:5f:35:33:f8:55:6a:5c:80:11:ee:aa:ea:3a:ce:b4:74: 09:ed:49:88:2f:71:5e:a5:7f:2c:b8:4d:b2:85:90:f4:8e:3c: 09:24:52:ab:b3:93:22:ff:4a:bd:46:14:1e:2d:7c:5e:24:1c: ed:91:77:a6:6d:4c:6c:3b:f0:e3:17:75:51:10:b6:e6:6e:c2: c2:6e:b7:6e:56:0e:ca:6a:c8:ef:11:df:da:59:0e:f3:f1:40: 6c:45:75:1f:f6:a0:f4:19:bc:78:91:97:be:19:af:04:93:2d: 96:95:a3:39:b7:26:0b:99:b5:8f:09:61:b4:11:02:c3:62:27: 8a:c9:e4:7f:bf:4b:dd:5f:28:e5:94:8e:4c:fa:a7:0f:b1:1d: d0:14:bd:4d:a0:de:f3:3a:d6:3c:14:d2:7f:14:72:3a:36:1c: f8:6d:59:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFpt+Y3MvciAQlx0c7d6Ge0bPNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3 QTE4NjcxNDAeFw0yNjA5MDMwODA3MzVaFw0yNjA5MDQwOTA2MzVaMDMxMTAvBgNV BAMTKDkzNjVBODdERDA5N0QyRURDMkQyMjVCMThCQzBEMkYyQzYzRTQxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvSpwmlEkzpczxLxiFsNa/eVU ZUCd4uWvIKyAOmnoPlZlPlXglmdxNzAizCjJgurYzec1uYINbIYLcwC8DXYzVx1G aNTOWaIfYJns6GYgjSOnxVfbJaN9QElsYBXkwS1dt4RjaGYDiC42Qznxr9EJd6Jd OI9NOKawkhTm9gO6qJ4+H+ogwFb753OTG1vnEUyg3BmNcklWmaJYILVmvHngq6a/ wZMORV+Xhi0OJZBzeU3bByqP6JqGJG6NpzpEbQgnwEZ/7e7p1xKi2zDls/huD7dn N71XbmjwfQyjnXuA3bwl942WOEXin25xet4SwPi3WASvT1qQdPli+b+0b7sBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk2WofdCX0u3C0iWxi8DS8sY+QXcwHwYDVR0j BBgwFoAULa/CUDBQmtcSa72Tq8y5XnoYZxQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0YmI0YzgtNmZjZi00ZmZmLWJkY2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAz MDUwOUFENzEyNkJCRDkzQUJDQ0I5NUU3QTE4NjcxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yREFGQzI1MDMwNTA5QUQ3MTI2QkJEOTNBQkNDQjk1RTdBMTg2 NzE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvMkRBRkMyNTAzMDUwOUFENzEyNkJCRDkzQUJDQ0I5 NUU3QTE4NjcxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjcE6KKc+eYfsnHMAT9GU52lzbxUy8cYWor NkFBbD++bCWsBpG28zzGhiJZoVaFd81jRIZssQ8IlwHVeJGv2ck9sxvr83mwRPUe HRwd+MmBYN5S4z13egGrhZflXzUz+FVqXIAR7qrqOs60dAntSYgvcV6lfyy4TbKF kPSOPAkkUquzkyL/Sr1GFB4tfF4kHO2Rd6ZtTGw78OMXdVEQtuZuwsJut25WDspq yO8R39pZDvPxQGxFdR/2oPQZvHiRl74ZrwSTLZaVozm3JguZtY8JYbQRAsNiJ4rJ 5H+/S91fKOWUjkz6pw+xHdAUvU2g3vM61jwU0n8Ucjo2HPhtWXw= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:16 2026 by rpki-client